A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. (CVE-2026-100886)

CVE-2026-100886 is a critical remote authentication bypass vulnerability in Seetong T8108, T8108P, T8116, and T8232 devices running firmware version 4.6.1.4-build202604241011. The issue arises from an unknown function within the Debug Service component that improperly authenticates users, allowing attackers to gain unauthorized access remotely without any privileges or user interaction. Public exploit code exists, increasing the risk of exploitation. The vendor was notified but has not responded or issued a fix. The vulnerability is scored 10.0 CVSS v3.1, reflecting its critical impact on confidentiality, integrity, and availability.

Successful exploitation allows remote attackers to bypass authentication controls, leading to full compromise of the affected devices. This includes complete loss of confidentiality, integrity, and availability of the system. Given the availability of public exploit code and lack of vendor remediation, affected devices are at high risk.

No official patch or remediation is currently available, and the vendor has not responded to disclosure. Users should consider isolating affected devices from untrusted networks and monitor for suspicious activity. Applying network-level protections such as firewall rules to restrict access to the Debug Service may reduce exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.